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(57)Abstract: 

PROBLEM TO BE SOLVED: To adequately determine a trouble 
caused by cooperative operation of a plurality of ECUs 
connected to each other via an in-vehicle network, and to 
rapidly specify failed part. _ 
SOLUTION: A vehicle manager ECU monitors the data of each 
ECU on the in-vehicle network (S100), and determines the 
trouble (S1 10). In other words, a trouble related to the 
cooperative operation of the ECU is also determined from the 
data on the failure detection result by a failure detection 
program executed by each ECU and the data handled between 
the ECUs via the vehicle manager ECU. An inspection diagnosis 
program ready for the trouble is acquired from a customer 
server (S160), the corresponding processing is performed by 
the applicable ECU by executing the acquired inspection 
diagnosis program, and the failed part is specified by 
transmitting internal variables in the specified control, etc., 
(S170). 
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* NOTICES * 

JPO and NCI PI are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original precisely. 
2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] Two or more electronic controls which have the fault detection program which is connected 
through the network in a car and detects failure of a car in control of a controlled system, It is the 
troubleshooting system equipped with the car management equipment which communicates through said 
electronic control and the network in said car, and performs fax service of a car. Said car management 
equipment A fault decision means to judge generating of fault based on the data of said electronic control 
received and passed through the network in said car, A program acquisition means to acquire the inspection 
diagnostic program which was made to run on the fault concerned and was beforehand prepared when 
generating of said fault was judged with said fault decision means, By performing said inspection diagnostic 
program acquired with said program acquisition means A failure part specification means to pinpoint a 
failure part based on the information which is made to perform correspondence processing to the 
corresponding electronic control, and is transmitted from said electronic control by activation of the 
correspondence processing concerned, The troubleshooting system characterized by having an information 
output means to output the failure information about failure, based on the processing result by said failure 
part specification means. 

[Claim 2] The data of said electronic control received and passed through the network in said car in a 
troubleshooting system according to claim 1 are a troubleshooting system characterized by being what 
outputted to said car management equipment by said fault detection program. 

[Claim 3] The data of said electronic control received and passed through the network in said car in a 
troubleshooting system according to claim 1 or 2 are a troubleshooting system characterized by being what 
received and passed between said electronic controls through said car management equipment between said 
car management equipment and said electronic controls or by both them. 

[Claim 4] It is the troubleshooting system characterized by making said program acquisition means acquire 
another inspection diagnostic program when said failure part specification means cannot pinpoint said 
failure part by said electric fault finding in a troubleshooting system according to claim 1 to 3. 
[Claim 5] It is the troubleshooting system which it is installed in the car exterior, it has further server 
equipment in which data communication is possible between said car management equipment in a 
troubleshooting system according to claim 1 to 4, and said server equipment has the storage means which 
memorized said inspection diagnostic program, and is characterized by for said program acquisition means 
of said car management equipment to acquire said checking program from said server equipment. 
[Claim 6] In a troubleshooting system according to claim 5 the program acquisition means of said car 
management equipment Inquiry information including the fault information which shows said fault is 
transmitted to said server equipment. Said server equipment If made said storage means correspond to said 
fault information, said inspection diagnostic program is memorized for it, it asks it from said program 
acquisition means and information is transmitted to it The troubleshooting system characterized by 
searching said inspection diagnostic program memorized by said storage means based on said fault 
information, and transmitting the corresponding inspection diagnostic program to said car management 
equipment. 

[Claim 7] When the customer information by which said server equipment is further prepared for said 
storage means for every user in a troubleshooting system according to claim 6 is memorized and the inquiry 
information from said program acquisition means is transmitted, in consideration of said customer 
information, it is the troubleshooting system characterized by transmitting the corresponding inspection 
diagnostic program to said car management equipment. 

[Claim 8] The program acquisition means of said car management equipment is a troubleshooting system 
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characterized by performing authentication processing which judges whether said server equipment is just in 
a troubleshooting system according to claim 5 to 7 in advance of reception of the inspection diagnostic 
program from said server equipment. 

[Claim 9] It is the troubleshooting system which the program acquisition means of said car management 

equipment acquires the correspondence processing program for said correspondence processing in said 

electronic control from said server equipment, transmits to said electronic control in a troubleshooting 

system according to claim 5 to 8, and is characterized by said electronic control memorizing said 

correspondence processing program transmitted from said car management equipment. 

[Claim 10] It is the troubleshooting system which said information output means of said car management 

equipment transmits said failure information to said server equipment in a troubleshooting system according 

to claim 5 to 9 based on the processing result by said failure part specification means, and is characterized 

by said server equipment memorizing said failure information for said storage means. 

[Claim 1 1 ] It is the troubleshooting system characterized by said server equipment performing a notice 

outside in a troubleshooting system according to claim 10 based on said failure information. 

[Claim 12] It is the troubleshooting system characterized by the ability of said program acquisition means to 

acquire said inspection diagnostic program beforehand in a troubleshooting system according to claim 5 to 

11. 

[Claim 13] Said program acquisition means is a troubleshooting system characterized by acquiring said 
inspection diagnostic program in the case of said another data transmission on the assumption that another 
data other than said inspection diagnostic program are transmitted to a car from said server equipment in a 
troubleshooting system according to claim 12. 

[Claim 14] Connect through the network in a car and it is used with two or more electronic controls which 
have the fault detection program which detects failure of a car in control of a controlled system. It is car 
management equipment which communicates through said electronic control and the network in said car, 
and performs fax service of a car. A fault decision means to judge generating of fault based on the data of 
said electronic control received and passed through the network in said car, A program acquisition means to 
acquire the inspection diagnostic program corresponding to the fault concerned if generating of said fault is 
judged with said fault decision means, By performing said inspection diagnostic program acquired with said 
program acquisition means A failure part specification means to pinpoint a failure part based on the 
information which is made to perform correspondence processing to the corresponding electronic control, 
and is transmitted from said electronic control by activation of the correspondence processing concerned, 
Car management equipment characterized by having an information output means to output the failure 
information about failure, based on the processing result by said failure part specification means. 
[Claim 15] Two or more electronic controls which have the fault detection program which is connected 
through the network in a car and detects failure of a car in control of a controlled system, It is server 
equipment which constitutes a troubleshooting system with the car management equipment which 
communicates through said electronic control and the network in said car, and performs fax service of a car. 
Said car management equipment performs correspondence processing to the corresponding electronic 
control, and is premised on having an inspection diagnostic function for pinpointing a failure part based on 
the information transmitted from said electronic control by activation of the correspondence processing 
concerned. If the inquiry information which is equipped with the storage means which the inspection 
diagnostic program for realizing said inspection diagnostic function was made to run on the fault 
information about fault, and memorized it, and includes said fault information from said car management 
equipment is transmitted Server equipment characterized by searching said inspection diagnostic program 
memorized by said storage means based on said fault information, and transmitting the corresponding 
inspection diagnostic program to said car management equipment. 

[Claim 16] Two or more electronic controls which have the fault detection program which is connected 
through the network in a car and detects failure of a car in control of a controlled system, It is the program 
performed with said car management equipment of a troubleshooting system equipped with the car 
management equipment which communicates through said electronic control and the network in said car, 
and performs fax service of a car. The inspection diagnostic program for pinpointing a failure part based on 
the information which is made to perform correspondence processing to the corresponding electronic 
control, and is transmitted from said electronic control by activation of the correspondence processing 
concerned. 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the troubleshooting system of a car. 
[0002] 

[Description of the Prior Art] In recent years, an advance of the mechatoronics technique with which the 
machine technique and the electronic technique were connected by making advances of an electronics 
technique, such as an appearance of a high performance microprocessor, into a background is remarkable. 
Many computer systems have been adopted also as cars, such as an automobile, as a part of advance of 
mechatoronics. Such a computer system for mount pursues saving resources, energy saving, performance- 
traverse ability, safety, the amenity, etc., and is carried in here and there [ of the engine and drive system in 
a car transit and a safety system, an entertainment system, and others ]. 

[0003] In such an electronic control, if fault detection like each part of a car is not performed exactly, 
various faults may be caused and running may become impossible depending on the case. Therefore, 
improvement in dependability is achieved by carrying the fault detection program for detecting the failure 
like each part of a car to an electronic control. That is, the operating state of the computer section or sensors 
is checked automatically a suitable period, and diamond GUKODO (SAE code etc.) etc. is memorized at the 
time of failure. 

[0004] By this, a repair person in charge will read diamond GUKODO memorized by the electronic control 

by connecting an exclusive tool, and will pinpoint a failure part. 

[0005] 

[Problem(s) to be Solved by the Invention] As for the fault detection mentioned above, it was common to 
have performed a fault detection program according to an individual in each electronic control, and to have 
been made in the unit of each electronic control. However, recently, it connects through the network in a car 
and the electronic control for car control performs cooperation actuation mutually. 

[0006] Therefore, the fault concerning the cooperation actuation between electronic controls might occur, 
and the situation where a locating fault cannot be pinpointed has arisen only from the information by the 
fault detection program prepared per electronic control. Moreover, since cooperation actuation is related, the 
special knowledge inside an electronic control is needed for pinpointing of a failure part which generated 
fault. Therefore, by the technique of connecting an exclusive tool to each electronic control like before, and 
reading diamond GUKODO etc., it reaches to an extreme of difficulty to pinpointing of a failure part. 
Therefore, although the car was carried into the repair shop or the dealer, the considerable period might be 
required by repair. 

[0007] This invention is made in order to solve the trouble mentioned above, it judges appropriately the fault 
by cooperation actuation of two or more electronic controls connected through the network in a car, and 
aims at enabling pinpointing of a still quicker failure part. 
[0008] 

[The means for solving a technical problem and an effect of the invention] The troubleshooting system of 
this invention is equipped with two or more electronic controls and car management equipment. An 
electronic control is connected through the network in a car, and it has the fault detection program which 
detects failure of a car in control of a controlled system. And car management equipment communicates 
with an electronic control through the network in a car, and performs fax service of a car. In this semantics, 
electronic-control and car management equipment also functions as a computer system on the network in a 
car. 

[0009] In this invention, car management equipment is arranged on the network in a car, and a fault decision 
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means judges generating of fault based on the data of the electronic control received and passed through a 
network.' For example, the data of an electronic control here are good also as what is outputted to car 
management equipment by the fault detection program, and good also as what replaces with in addition to 
this (claim 2), and is received and passed between electronic controls through car management equipment 
between said car management equipment and said electronic controls or by both them (claim 3). It is the 
configuration which notifies the judged abnormalities to car management equipment by the fault detection 
program in the case of the former. If abnormalities are notified from two or more electronic controls, the 
fault concerning the cooperation actuation between electronic controls can be judged, the demand of a 
configuration and car management equipment whose car management equipment, as for the latter, on the 
other hand, supervises the data which function as the so-called gateway and flow to the network in a car — 
or the configuration which supervises the data received and passed by the demand of other electronic 
controls between car management equipment and an electronic control, or the configuration which 
supervises the data of both them mean. Also by supervising the data which flow to the network in a car, the 
cooperation actuation between electronic controls can be supervised and the fault concerning this 
cooperation actuation can be judged. 

[0010] A program acquisition means acquires the inspection diagnostic program which was made to run on 
fault and was prepared beforehand. And by performing the acquired inspection diagnostic program, a failure 
part specification means makes the corresponding electronic control perform correspondence processing, 
and pinpoints a failure part based on the information transmitted from an electronic control by activation of 
the correspondence processing concerned. That is, it is the directions from car management equipment, and 
an electronic control is made to perform correspondence processing for locating fault specification, for 
example, the internal variable in specific control etc. is made to transmit. 

[001 1] And an information output means outputs the failure information about failure based on the 
processing result by the failure part specification means. As long as this may be lighting of an alarm lamp 
and is a configuration equipped with navigation equipment, it may be the so-called information display to 
the Nabih screen. What [ not only ] shows the failure part at the time of the ability to pinpoint a failure part 
but the information which shows the internal variable transmitted from what shows the abnormal occurrence 
when the ability not to pinpoint a failure part, or an electronic control is included in failure information. 
[0012] Thus, since generating of fault is judged based on the data of the electronic control received and 
passed through a network according to this invention, generating of the fault concerning the cooperation 
actuation between electronic controls can also be judged. And since the internal variable for example, in 
specific control etc. is made to transmit to the corresponding electronic control using the inspection 
diagnostic program prepared beforehand and a failure part is pinpointed, possibility that a failure part can be 
pinpointed quickly is high. 

[0013] In addition, a failure part specification means can think of making it make a program acquisition 
means acquire another inspection diagnostic program, when a failure part cannot be pinpointed with an 
inspection diagnostic program (claim 4). Since this can consider various failure factors to the fault to 
generate, it is the technical thought of pinpointing a failure part gradually with two or more inspection 
diagnostic programs. For example, it is condition of hierarchizing and preparing the inspection diagnostic 
program and using gradually in consideration of the internal variable from an electronic control etc. If it 
does in this way, possibility that it can specify with two or more inspection diagnostic programs becomes 
high, and the failure part relevant to delivery of the complicated data between electronic controls etc. can 
also be contributed to pinpointing of a quick failure part. 

[0014] By the way, the inspection diagnostic program of memorizing in a car is not [ be / if / it considers 
preparing to various faults, or ] realistic [ considering hierarchizing and preparing, ], although beforehand 
prepared according to fault. Then, it is desirable to adopt the configuration which is installed in the car 
exterior and is further equipped with the server equipment in which data communication is possible between 
car management equipment. At this time, server equipment has the storage means which memorized the 
inspection diagnostic program, and the program acquisition means of car management equipment acquires a 
checking program from server equipment (claim 5). If it does in this way, in each car, a suitable inspection 
diagnostic program can be used by updating the inspection diagnostic program of server equipment as well 
as the memory capacity of each car being reducible. 

[0015] It considers as the configuration which transmits the inquiry information in which the program 
acquisition means of car management equipment specifically includes the fault information which shows 
fault to server equipment. Server equipment If made the storage means correspond to fault information, the 
inspection diagnostic program is memorized, it asks from a program acquisition means and information is 
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transmitted It is possible to consider as the configuration which searches the inspection diagnostic program 
memorized by the storage means based on fault information, and transmits the corresponding inspection 
diagnostic program to car management equipment (claim 6). 

[0016] At this time, server equipment may memorize the customer information further prepared for a 
storage means for every user. In this case, transmission of the inquiry information from a program 
acquisition means transmits the corresponding inspection diagnostic program in consideration of customer 
information (claim 7). The car information which shows the type of a car which the user is using, and grade 
as customer information, the history-of- failure information on the car, etc. are mentioned as an example. If 
there are car information and history-of- failure information, possibility that a suitable inspection diagnostic 
program can be chosen will become high, and will lead to pinpointing of a quick failure part as a result. 
Moreover, if it is made to include the specific information which can specify a user as customer information, 
unjust access of those other than the user who exchanged the service contract can also be prevented. 
[0017] Such unlawful access prevention becomes important [ a car side ]. It is because the serious trouble 
for insurance transit will be caused if car management equipment serves as the situation of receiving an 
unsuitable program. Then, it is desirable for the program acquisition means of car management equipment to 
be made to perform authentication processing which judges whether server equipment is just in advance of 
reception of the inspection diagnostic program from server equipment (claim 8). 

[0018] In addition, in this invention, it is characterized [ one ] by the ability to add and change the program 
by the side of a car easily by acquiring the program performed by the car side as mentioned above from 
server equipment. You may constitute from such a viewpoint so that the correspondence processing program 
for realizing correspondence processing performed with an electronic control may also be acquired from 
server equipment besides memorizing beforehand to an electronic control. That is, it is good also as a 
configuration which memorizes the correspondence processing program with which the program acquisition 
means of car management equipment acquired the correspondence processing program for the 
correspondence processing in an electronic control from server equipment, it transmitted to the electronic 
control, and the electronic control was transmitted from car management equipment (claim 9). In this case, 
what is necessary is just to secure the storage region for memorizing a correspondence processing program 
inside an electronic control. By this, an electronic control can be made to perform correspondence 
processing doubled with the inspection diagnostic program, and the width of face of failure part 
specification will spread. 

[0019] By the way, although it already said that an information output means outputs failure information 
based on the processing result by the failure part specification means, such information is applicable to 
modification of an inspection diagnostic program, or creation of a new inspection diagnostic program. Then, 
the information output means of car management equipment transmits failure information to server 
equipment based on the processing result by the failure part specification means, and it is possible to 
consider server equipment as the configuration which memorizes failure information for a storage means 
(claim 10). If it does in this way, the failure information based on the processing result of the fault generated 
by each car will be saved for the storage means of server equipment, and the suitable renewal of an 
inspection diagnostic program and creation of a new inspection diagnostic program will become easy. 
[0020] Moreover, it not only memorizes the information about such a failure part for a storage means, but 
server equipment may be made to perform a notice outside based on the information about a failure part 
(claim 11). It can consider it to be the exterior to consider as the contact decided for every user, for example, 
a dealer, and service works. For example, if parts to be exchanged are beforehand connected to service 
works, quick management will be attained when service works are visited for repair of a user. 
[002 1 ] When the failure information about a failure part is saved to server equipment, the case where the 
high inspection diagnostic program of possibility of being needed can specify to some extent can be 
considered by taking the statistics of those failure information further again. Then, such an inspection 
diagnostic program may be memorized to car management equipment, before fault actually occurs. 
[0022] That is, a program acquisition means may make an inspection diagnostic program a beforehand 
acquirable configuration (claim 12). For example, it is possible that a program acquisition means acquires an 
inspection diagnostic program from server equipment in the case of the another data transmission concerned 
on the assumption that another data other than an inspection diagnostic program are transmitted to a car 
(claim 13). With another data, map data, retrieval data, etc. in the case of having for example, navigation 
equipment are mentioned. For example, when a search of a store etc. is performed with navigation 
equipment, it is condition of making it superimposing on the retrieval data corresponding to this, and 
acquiring a specific inspection diagnostic program. 
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[0023] If the newest fault discovered with other vehicle acquires the optimal thing from the inspection 
diagnostic-program group beforehand by the above-mentioned configuration based on the synthetic decision 
result from the failure information collected by then, depending on the case, an inspection diagnostic 
program can be immediately started at the time of generating of fault, and possibility that a failure part can 
be pinpointed still more quickly will become high. 

[0024] Although the above has been explained as invention of a fax service system, it is also realizable as 
invention of the car management equipment which constitutes such a fax service system (claim 14). Since 
the operation and effectiveness by this fax service equipment are the same as the operation of fax service 
equipment and effectiveness in the troubleshooting system mentioned above, explanation is omitted. 
[0025] Also in such fax service equipment, when a failure part specification means cannot pinpoint a failure 
part with an inspection diagnostic program, it is possible to constitute so that a program acquisition means 
may be made to acquire another inspection diagnostic program. Moreover, a program acquisition means can 
be constituted as follows on the assumption that a configuration equipped with server equipment. 
[0026] That is, by transmitting the inquiry information which includes fault information, for example to 
server equipment, it can constitute so that a checking program may be acquired from server equipment. 
Moreover, in advance of reception of the inspection diagnostic program from server equipment, it may be 
made to perform authentication processing which judges whether server equipment is just. Not only an 
inspection diagnostic program but considering the correspondence processing program for the 
correspondence processing in an electronic control as the configuration which acquires from server 
equipment and is transmitted to an electronic control is considered further again. Moreover, you may make 
it the newest fault discovered with other vehicle acquire beforehand the inspection diagnostic program 
optimal from an inspection diagnostic-program group from server equipment based on the synthetic decision 
result from the failure information collected by then in the case of reception of for example, another data. 
[0027] Furthermore, speaking of an information output means, based on the processing result by the failure 
part specification means, you may constitute so that failure information may be transmitted to server 
equipment. By the way, it is also realizable as invention of the server equipment which constitutes the fax 
service system mentioned above (claim 15). Since the operation and effectiveness by this server equipment 
are the same as the operation of server equipment and effectiveness in the troubleshooting system mentioned 
above, explanation is omitted. 

[0028] If the customer information further prepared for every user is memorized for the storage means, it 
asks it from car management equipment and information is transmitted to it, you may make it transmit the 
corresponding inspection diagnostic program in consideration of customer information also in this server 
equipment. Moreover, memorizing the correspondence processing program for realizing correspondence 
processing performed with an electronic control is also considered by the storage means. 
[0029] Furthermore, it is possible to memorize the failure information concerned for a storage means with 
the configuration whose car management equipment transmits failure information. Moreover, based on the 
failure information concerned, it may be made to perform a notice outside. In addition, in this invention, an 
electronic control is made to perform correspondence processing and the description is in the inspection 
diagnostic program which pinpoints a failure part based on the information transmitted from an electronic 
control by the correspondence processing concerned. In this semantics, it is also realizable as invention of an 
inspection diagnostic program (claim 16). 
[0030] 

[Embodiment of the Invention] Hereafter, one example which materialized this invention is explained with 
reference to a drawing. Drawing 1 is the explanatory view showing the outline configuration of the 
troubleshooting system of an example. The troubleshooting system of this example is equipped with the 
computer system carried in a car, and the customer server 40 as "server equipment" installed out of a car. 
[0031] The computer system carried in a car is the car manager ECU 30 as the engine ECU 1 1 as a 
"electronic control", transmission ECU 12, a brake ECU 13, Nabih ECU 14, an audio ECU 15, TEL- 
ECU^, meter ECU 17, anti-theft ECU 18, an air-conditioner ECU 19, and "car management equipment." 
[0032] The car manager ECU 30 is connected to the control-system network 21, the information system 
network 22, and the body system network 23 as "a network in a car". On the control-system network 21 An 
engine ECU 1 1 Transmission ECU 12 and a brake ECU 13 are arranged. On the information system 
network 22 With Nabih ECU 14 An audio ECU 15 and TEL-ECU 16 are arranged, and meter ECU 17, and 
anti -theft ECU 18 and Air-conditioner ECU 19 are arranged on the body system network 23. 
[0033] An engine ECU 1 1 mainly controls a car engine. Specifically based on various sensor signals, such 
as an accelerator sensor, an air-fuel ratio sensor, and an air content sensor, an injector, a throttle motor, etc. 
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are controlled. When an example of the function is briefly explained about other ECUs 12-19, Transmission 
ECU has a function about the shift change of an automatic transmission, and Brake ECU has the adjustment 
function of brake oil pressure. Moreover, Nabih ECU 14 has dispatch/arrival function [ in / the guidance 
function based on the set-up root, and an audio ECU 15, and / in TEL-ECU 16 / the portable telephone of 
hand free ]. [ regenerative fiinctions, such as CD, ] Furthermore, meter ECU 17 has the accommodation 
function of ****** or blast weight in which the emergency call function based on the vibration at the time 
of a car stop etc. and an air-conditioner ECU 19 serve as a setting room temperature in a meter display 
function and anti-theft ECU 18. 

[0034] Thus, although each ECUs 11-19 control each controlled system, if needed, it cooperates and they 
operate. For example, the vehicle speed as display information in meter ECU 17 etc. is condition of being 
transmitted through engine ECU1 1 empty- vehicle both the managers ECU 30. The car manager ECU 30 has 
the function as the so-called conventional gateway ECU in this semantics. Moreover, each ECUs 11-19 
perform the fault detection program which detects the failure like each part in control of each controlled 
system, and the fault detection result by the fault detection program is transmitted to the car manager ECU 
30. And especially, by this example, if transmitting directions of the internal variable for example, in 
specific control etc. are made from the car manager ECU 30, the directed information will be outputted to 
the car manager ECU 30 by performing the correspondence processing program carried beforehand. About 
the ECU processing which makes an activation judgment of this correspondence processing program, it 
mentions later. 

[0035] On the other hand, the customer server 40 is installed in the car exterior, and is constituted possible 
[ data communication ] with the car manager ECU 30 through the base station 50 of wireless by connecting 
with an information communication network. The customer server 40 is also constituted as the so-called 
computer system. And it has the database 41 as a "storage means." 

[0036] As shown in this database 41 at drawing 2 , 41 d of failure information transmitted to service by the 
troubleshooting system of this example by the car manager ECU 30 based on the processing result by 
customer information 41a which is carrying out contract subscription, and which is prepared for every 
customer, fault information 41b which typified the fault generated by the car, inspection diagnostic-program 
41c performed by the car manager ECU 30, and inspection diagnostic-program 41c is memorized. At this 
time, inspection diagnostic-program 41c is made to correspond to fault information 41b, and is prepared. In 
drawing 2 , it was shown by making a set fault information 41b and inspection diagnostic-program 41c. 
[0037] The specific information for specifying the user who accessed the customer server 40 as customer 
information 41a, the history-of- failure information about the past failure, the car information that shows a 
type of a car and grade, and the contact information at the time of failure shall be memorized. Specific 
information can consider constituting from user ID and a password. Moreover, to contact information, it is 
possible to use the telephone number and a FAX number. 

[0038] Fault information 41b typifies the fault symptom of a car, and becomes a key for searching 
corresponding inspection diagnostic-program 41c from the fault information in the inquiry information 
transmitted by the car manager ECU 30. Inspection diagnostic-program 41c is a program for pinpointing a 
failure part based on the information which the car manager ECU 30 downloads and performs, makes that to 
which it corresponds in ECUs 1 1-19 perform correspondence processing, and is transmitted by 
correspondence processing. 

[0039] And 41 d of failure information is the information transmitted when a failure part is pinpointed by the 
car manager ECU 30, and since it is effective in creation of inspection diagnostic-program 41c, it is 
memorized by the database 41 of the customer server 40. Next, actuation of the troubleshooting system of 
this example is explained. 

[0040] Here, first, actuation of the car manager ECU 30 is explained and the customer server 40 
corresponding to this and processing of each ECUs 1 1-19 are explained below. Drawing 3 is a flow chart 
which shows the troubleshooting processing performed by the car manager ECU 30. This processing is 
repeatedly performed at intervals of predetermined time. 

[0041] In the first step (Notation S only shows a step hereafter.) 100, the data of each ECUs 1 1-19 on the 
networks 21 and 22 in a car and 23 are supervised first. Data here are the fault detection result data based on 
the fault detection program performed by each ECUs 11-19, and data which mind the car manager ECU 30 
and are carried out between ECUs 11-19. That is, the car manager ECU 30 detects not only the fault 
according to individual in ECUs 11-19 but the fault concerning cooperation actuation of ECUs 1 1-19 by 
supervising these data. For example, from Nabih ECU 14, in spite of outputting the data in which it is shown 
that it is an uphill, a case as the engine load is not changing from the data of an engine ECU 1 1 at all is 
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supervised as one abnormality pattern. 

[0042] Based on this data monitor result, the fault of a car is judged by SI 10 continuing. When fault is 
judged here (SI 10: YES), it shifts to SI 20. On the other hand, when fault is not judged (SI 10:NO), 
subsequent processings are not performed but this troubleshooting processing is ended. 
[0043] In SI 20, between the customer servers 40, a data communication possible condition is established 
and inquiry information is transmitted. Establishment of a data communication condition is made through 
predetermined procedure of the car manager ECU 30 doing call origination of the customer server 40, for 
example, transmitting user ID and a password, and judging whether you being the user who is doing 
contract subscription using the specific information in customer information 41a which the customer server 
40 mentioned above. Thus, establishment of a data communication possible condition transmits [ next ] 
inquiry information. The fault information which shows the judged fault is included in inquiry information. 
[0044] On the other hand, in the customer server 40, the fault information included in inquiry information is 
compared with fault information 41b in a database 41, and corresponding inspection diagnostic-program 41c 
is further chosen in consideration of the history-of- failure information and car information in customer 
information 41a. 

[0045] Therefore, in SI 30 continuing, it judges whether the inspection diagnostic program was chosen. This 
judgment is made based on the notice of the completion of selection from the customer server 40. When it is 
judged that the inspection diagnostic program was chosen here (S130:YES), it shifts to S140. On the other 
hand, before inspection diagnostic-program 41c is chosen, (S130:NO) and this decision processing are 
repeated. 

[0046] An authentication procedure is performed in SI 40. This authentication procedure is a thing for the 
insurance by the side of a car, and is the meaning which prevents reception of an unjust program certainly. 
When rewriting the data in ECU with a tool, specifically, it is possible to perform authentication using a 
function which is used conventionally. For example, function value [, such as a random number r, ] f (r) is 
transmitted from one equipment, and the function value F (f (r)) based on this function value f (r) is made 
for the equipment of another side to answer a letter. And if it is judged as function value F(f (r)) =r (i.e., if 
one equipment is function F=f -1), it will be condition of judging the equipment of another side to be just 
equipment. 

[0047] When it is judged in such an authentication procedure (SI 40) that the customer server 40 is just 
(SI 50: YES), it shifts to SI 60. On the other hand, when it is judged that it is not just (S150:NO), subsequent 
processings are not performed but this troubleshooting processing is ended. 

[0048] Inspection diagnostic-program 41c is downloaded in SI 60. Here, download is required from the 
customer server 40 and inspection diagnostic-program 41c transmitted from the customer server 40 is 
received. In SI 70 continuing, downloaded inspection diagnostic-program 41c is performed. Only that to 
which it corresponds in ECUs 1 1-19 by this performs correspondence processing, and transmits information, 
such as an internal variable for example, in specific control, by correspondence processing. Consequently, in 
inspection diagnostic-program 41c, a failure part is further pinpointed based on the information transmitted. 
[0049] Therefore, in the following SI 80, it judges whether the failure part was pinpointed. When a failure 
part is pinpointed here (SI 80: YES), it shifts to SI 90. On the other hand, when a failure part is not 
pinpointed (S180:NO), the processing from SI 20 is repeated. That is, if negative judgment is carried out 
here, new inquiry information will be transmitted (SI 20), and it is chosen (SI 30: YES), and another 
inspection diagnostic program will download and will be performed (SI 60, SI 70). 

[0050] In SI 90, while transmitting the failure information about the pinpointed failure part to the customer 
server 40, the information display about failure is performed. Then, this troubleshooting processing is ended. 
The information display about failure can consider carrying out in the form of lighting of an alarm lamp 
with the information output to meter ECU 17. Moreover, the information output to Nabih ECU 14 may 
perform in the format of the information display to the Nabih screen used for implementation of a guidance 
function, for example. You may be the display which points out in the case of the latter (for example, the 
failure part "OO needs to be exchanged"), and may be the abstract contents display "request repair." If these 
contents of a display are made to make a setting change according to a request of a customer, they are 
convenient. 

[005 1 ] The processing in the customer server 40 performed corresponding to the troubleshooting processing 
in such a car manager ECU 30 is the server side processing shown in the flow chart of drawing 4 . This 
processing will be repeatedly performed at intervals of predetermined time, if a data communication 
possible condition is established among the car managers ECU 30 through a predetermined procedure which 
was mentioned above. 
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[0052] In S200 of the beginning, it judges first whether the inquiry information from the car manager ECU 
was transmitted. This processing corresponds to SI 20 in drawing 3 . When it asks here and information is 
transmitted (S200:YES), it shifts to S210. On the other hand, when inquiry information is not transmitted 
(S200:NO), it shifts to S250. 

[0053] Fault information 41b is used as a key, and inspection diagnostic-program 41c in a database 41 is 
searched with S210. Moreover, at this time, as mentioned above, the history-of- failure information and car 
information in customer information 41a are also taken into consideration. And corresponding inspection 
diagnostic-program 41c is chosen. By the notice of the completion of selection of this inspection diagnostic- 
program 41c, the car manager ECU 30 performs an authentication procedure (S140 in drawing 3 ). 
[0054] Therefore, corresponding to this, an authentication procedure is performed among the car managers 
ECU 30 by S220. By activation of an authentication procedure, the car manager ECU 30 will demand 
download of inspection diagnostic-program 41c, if judgment that the customer server 40 is just is made 
(SI 50: YES in drawing 3 ) (SI 60). 

[0055] So, in S230 continuing, it judges whether there was any download demand of inspection diagnostic- 
program 41c. When it is judged that there was a demand of download here (S230:YES), inspection 
diagnostic-program 41c is transmitted in S240, and it shifts to S250 after that. On the other hand, when it is 
judged that there is no download demand (S230:NO), processing of S240 is not performed but it shifts to 
S250. 

[0056] In S250, it judges whether failure information was transmitted. This processing corresponds to SI 90 
in drawing 3 , and the car manager ECU 30 will transmit the failure information about that failure part, if a 
failure part is pinpointed (SI 80: YES in drawing 3 ). When it is judged that failure information was 
transmitted here (S250: YES), it shifts to S260. On the other hand, when failure information is not 
transmitted (S250:NO), subsequent processings are not performed but this server side processing is ended. 
[0057] In S260 which shifts when failure information is transmitted, failure information is memorized in a 
database 41. This is equivalent to 41 d of failure information shown in drawing 2 . And the notice based on 
failure information is performed in S 1 70 continuing, and this server side processing is ended after that. The 
notice based on failure information is made to the contact specified for the contact information in customer 
information 41a. For example, when the specific repair shop where that customer requests repair from 
usually is specified for contact information, it is condition of performing communication to this repair shop. 
The contents of a notice are condition of being what directs the exchange parts of the failure part pinpointed, 
for example. 

[0058] Moreover, the processing in ECUs 11-19 performed corresponding to the troubleshooting processing 
in the car manager ECU 30 is the ECU processing shown in the flow chart of drawing 5 . This processing is 
repeatedly performed in each ECUs 1 1-19 at intervals of predetermined time. 
[0059] It is not rich and that processing is started judges whether had directions of correspondence 
processing (S300). These directions are outputted by activation of inspection diagnostic-program 41c by the 
car manager ECU 30 (SI 70 in drawing 3 ). As mentioned above, the directions which require transmission 
of the internal variable in specific control are mentioned as an example. When there are directions of 
correspondence processing here (S300:YES), a correspondence processing program is performed (S3 10) and 
this ECU processing is ended after that. On the other hand, when there are no directions of correspondence 
processing (S300:NO), processing of S3 10 is not performed but this ECU processing is ended. By activation 
of a correspondence processing program, information, such as a directed internal variable, is transmitted to 
the car manager ECU 30. In addition, although transmitting directions of the internal variable in specific 
control are mentioned as the example in the above explanation, what is necessary is just transmitting 
directions of information useful to failure part specification. 

[0060] Next, the effectiveness which the troubleshooting system of this example demonstrates is explained. 
In the troubleshooting system of this example, the car manager ECU 30 supervises the data of each ECUs 
1 1-19 on the networks 21 and 22 in a car, and 23 (SI 00 in drawing 3 ), and judges fault (SI 10). That is, fault 
is judged from the fault detection result data based on the fault detection program performed by each ECUs 
11-19, and the data which mind the car manager ECU 30 and are carried out between ECUs 11-19. 
Therefore, the car manager ECU 30 can detect not only the fault according to individual in ECUs 11-19 but 
the fault concerning cooperation actuation of ECUs 11-19. And a failure part is pinpointed by making that to 
which it corresponds in ECUs 11-19 perform correspondence processing, for example, making the internal 
variable in specific control etc. transmit by acquiring inspection diagnostic-program 41c corresponding to 
fault (SI 60), and performing an inspection diagnostic program (SI 70). Consequently, possibility that a 
failure part can be pinpointed quickly is high. 
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[0061] Moreover, in the troubleshooting system of this example, when a failure part cannot be pinpointed 
(S180:NO), new inquiry information is transmitted (S120), and another inspection diagnostic-program 41c 
is acquired and performed (SI 60, SI 70). Since this can consider various failure factors to the fault to 
generate, it means pinpointing a failure part gradually by two or more inspection diagnostic-program 41c. 
For example, it is possible using the FTA (Fault Tree Analysis) technique to prepare two or more inspection 
diagnostic programs 41 . By this, possibility that it can specify even if it is a failure part relevant to delivery 
of the complicated data between each ECU 11-19 etc. becomes high, and can contribute to pinpointing of a 
quick failure part. 

[0062] In the troubleshooting system of this example, the customer server 40 is installed in the car exterior, 
and inspection diagnostic-program 41c is acquired from (SI 20 in drawing 3 ), and the customer server 40 
further again by transmitting the inquiry information which includes fault information to this customer 
server 40 (SI 60). Consequently, as well as the memory capacity of each car being reducible, by updating the 
database 41 of the customer server 40 frequently, suitable inspection diagnostic-program 41c can be used, 
and suitable pinpointing of a failure part is realized in each car. 

[0063] Moreover, customer information 41 a is memorized by the customer server 40 (refer to drawing 2 ), 
and inspection diagnostic-program 41c which transmits to the car manager ECU 30 is chosen as it in 
consideration of the history-of-failure information and car information in customer information 41a (S210 in 
drawing 4 ). therefore, the effectiveness of [ possibility that a suitable inspection diagnostic program can be 
chosen becomes high, and ] pinpointing of a quick failure part — the time — a hug ~ becoming . 
[0064] Furthermore, the specific information for specifying the user who is doing contract subscription as 
customer information 41a is memorized, and a data communication possible condition is established among 
the car managers ECU 30 using this specific information. Therefore, unjust access of those other than the 
user who exchanged the contract can be prevented. On the other hand, in advance of download of inspection 
diagnostic-program 41c, the car manager ECU 30 performs an authentication procedure between customer 
servers (S140 in drawing 3 , S220 in drawing 4 ), and judges the justification of the customer server 40 
(SI 50 in drawin g 3 ). By this, it can prevent that the car manager ECU 30 receives an unsuitable program, 
and the situation which causes the serious trouble for insurance transit can be avoided certainly. 
[0065] Moreover, in the troubleshooting system of this example, if the car manager ECU 30 pinpoints a 
failure part (SI 80: YES in drawing 3 R> 3), he will transmit the failure information about a failure part to the 
customer server 40 (SI 90). On the other hand, the customer server 40 remembers failure information that 
failure information is transmitted to a database 41 (S260), and accumulates it as 41 d of failure information 
(refer to drawing 2 ). (S250:YES in drawing 4 ) Therefore, creation and an updater become easy about 
inspection diagnostic-program 41c by using 41 d of this failure information. That is, improvement in the 
creation effectiveness of inspection diagnostic-program 41c is achieved. 

[0066] In addition, the customer server 40 does not stop at storage of failure information, but performs the 
notice based on failure information (S270 in drawing 4 ). For example, it is condition of connecting parts 
being exchanged to service works beforehand. Quick management is attained when service works are visited 
by this for repair of a user. 

[0067] As mentioned above, this invention is not limited to such an example at all, and can be carried out 
with the gestalt which becomes various in the range which does not deviate from the main point of this 
invention. 

(b) In the above-mentioned example, it is characterized [ one ] by the ability to update the program by the 
side of a car easily by acquiring the program performed by the car side from the customer server 40. 
[0068] The correspondence processing program performed by ECUs 1 1-19 is prepared for the database 41 
of the customer server 40, and you may make it download it by the car manager ECU 30 with inspection 
diagnostic-program 41c from such a viewpoint, as shown in drawing 6 . And it is made to be transmitted to 
that to which it corresponds in ECUs 11-19 from the car manager ECU 30 about a correspondence 
processing program. That is, what is necessary is just to secure the storage region for a correspondence 
processing program to ECUs 1 1-19. If it is made to correspond to inspection diagnostic-program 41c and 
correspondence processing program 41 e is prepared as shown especially in drawing 6 , correspondence 
processing doubled with inspection diagnostic-program 41c can be performed, and the width of face of 
failure part specification will spread. 

[0069] (b) Moreover, in the above-mentioned example, when fault was judged, inspection diagnostic- 
program 41c was downloaded each time. However, if the statistics of 41 d of failure information memorized 
by the database 41 of the customer server 40 are taken, fault with high occurrence frequency may be 
specified. Therefore, a configuration which transmits beforehand inspection diagnostic-program 41c 
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corresponding to the fault assumed that occurrence frequency is high to customer server 40 empty- vehicle 
both the* managers ECU 30 may be adopted. Download can think of considering as the configuration to 
which the map data used for Nabih's ECU 14 guidance function, retrieval data, etc. are transmitted from the 
customer server 40, making it superimpose on these data, and making it made also in the semantics which 
holds down communication link cost, for example. Thus, if inspection diagnostic-program 41c 
corresponding to the fault assumed that occurrence frequency is high is acquired beforehand, depending on 
the case, inspection diagnostic-program 41c can be immediately started at the time of generating of fault, 
and possibility that a failure part can be pinpointed still more quickly will become high. 
[0070] (Ha) In the above-mentioned example, before a failure part is pinpointed, inspection diagnostic- 
program 41c of a (S180:NO in drawing 3 ) and repeat exception is downloaded further again (SI 60). 
However, when a failure part cannot be pinpointed by inspection diagnostic-program 41c of a predetermined 
number, or when [ since it is also considered that a failure part cannot be pinpointed by two or more 
inspection diagnostic-program 41c, either, for example, / even if it uses a series of inspection diagnostic- 
program 41c prepared gradually, ] a failure part cannot be pinpointed, the information till then may be 
transmitted to the customer server 40, and you may make it a configuration which looks for decision of a 
technical person in charge. 
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ftEtt&IPflrrttfle *r 4 fc * WttaEWK^n v ^ 
£ , & ti H "f ^ T J i frm m H JtS S -£T K« L fc K 

nu EWBf a«ffi* <b WUJE^**«* fr ft trRflv^fc 
tfffi«* f i8«3ft* fc , lWEE1B*«KE1BSftfc1»E 
ttSttlTr ra^7^tH9 E* « K ffio' v, » r #m 
L, MESi-SttSEKWr^a r 7 ^ S:l»EffWi»a»«^ 
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»KK t lUBBilWrt ^> "J Y r J - 9 % it Lxmm L , IW 

wttBtfafctr -) «w»a«B t %m x. ^ aiss^rr *> * 
fi»o» Eflt « » a« tt c T Si t ^ r n ^ v a -c * 

sc^i-r ^ B^wwRtt^wffijaat jut 

«.aco*fT(^ -t *9 lBE«-T-«iaHStt*» % Skit ?iL4 

1 0 0 0 1 ) 

^critic 

[0 0 0 2] 

(,^<«3>^-r>xf^ £ tit 

[0003] tfilT-WS^trii, 

iftuar * * ostissE«tai r n ^ 5 ^ t jsm-r ^:hc«t 
- ^ »^ -b > * a o«6^ 4*98 ^is^j^r am x g n k c f- 

&B»#{;i±, f^T^n-K (SAE3-K 
[0004] :iu:^) , ¥tmi&£1tl** flt^HnWtttt 

4c 

[0 0 0 5] 

imi L -t -) fc 1- 4 KHI] ±i£ L fc&l^^tb (i , 
&?&=FUW » IS Ci is ^ r « BU i:aP»B^o $r v A « 

[0 0 0 6 ] ^OfcAmT-ilWWRttHloaatMftJZfti 

7F*6-**«±i-i oruBttyj'* ^ . s^wwustt^ffi-cffl 
fit $ i t & ttff Kktt 7" n ^* v a \z x z> mWifr h tz * t r-ii-^c 

«ilt < & c fc , at^iwai-ssittrtiBwjsrjw^ 



5 

[ 0 0 0 7 ] ±.&Lt-Wm**Wik'tZt:*> 
t: «c $ n/j & coT'A fj . 9Hrt * ? h 7 - 9 £ ft I Ttt 

m. z 1 1 h m & co « ^ u ffli k n v> m m m \* \ : «t & * £ 

[0 0 0 8] 

«Bfc*«;L&o B?-lHffll«Ba. Ip«n*y K7-* 
£ 4h L T ft& $ ii . IMffll Wfe O ilJlJfflJ Hist* Tip. M co ft^ 

JSRBrt*. IpMrt * y L T«7-«flP»K t 

«b t hwwsmsb t mm * ? v n - ? ±<o =i > tr * 

[0 0 0 9] **9JT-(±, #«*S«fi*iWWrt** h 
7-* JiKiEBL", * * h 7-* t^LT4it«$i-L& 

<o-r'-*li, ffitB^mrn ^7<M::J:oT*nW«OTt 
^tt* $ ft* k<o> LTfe «tv>t (IS*JH2) , :iit: 
fill A * * ^ lift i , WW* mm B £ ^ L T HHHUttJ » K 

but, DirevKvaea t umm-j-mm^m t <omx\ 

T , Wr L JW <r (CWl i ««B*>JiB*l+ * HUE T* 
»UW«6BW^ai»ttftU«&5p*^4-flKi--6 w ttfX 

litiK, *WfffflS6BwK*UJ: ciTi fcttificr) 
«T-WW»B«0R*C <t o TflIH*3RH.«B £ tt^WflPK 

Btwiai-esitiK$jn-&f-^ tE«t4M, **v* 

Tt, K?«ifliSBnos«iibfiPfrE«T». ;<oii)i 
ff*^i-^ ^ ^ t-iJ fflri- ^T- ^ 7^ e 

[0 0 10] rn^5AIR»^a:li, 
T^ 4>m « S it ^ tt£»»f ^d^'^^ w»-r 4 0 * L 
T, &©@rr^!^^gt^, JR#$<L^«tJE»rrrDr7 
A*SMrf&£ hci^t, KSi-^ltt^anWKBuisJ- 

jsatjgstKffs-fr, SBotiEttasosEfTmt ^ k-t-hhwh 

4, oil »W1HBrrfl*3lEOfc*ji, HlM«JHM6Ba*0 
oftST, flI-T L «»»B/j f »l&«tait-«ffi--5) J: 
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[00 1 1] *LT, fll«a**B(i, &mffiTfrtt?tt 

mzxzj t: at-^ u » t , i&i® u m -t z> mmm % 

10 ttw ^^waiRfi^ «b i^i $ ii & ft ffiKft* 7f-i-+g 
«4f iiJ&o 
[0012] COJ: *; H^&^ItC «t ittf, v;h7-f 
*: L T $it it S i l Z> n-T-IHim KB «f-^:S^| ^; 
*^w«4fe«:flBr-r4 *:*!>, W7-«l»KBIWoa»«;fl5 

T , T'^/BS;?H/j^LWr^D^vA«rWv\ gg^-r 
4 a7-M»»ffi A. (dTt^un c tt 4 ft ffi£K ^ 
«: iSA ^*t±T ttREHBf «-«fSe+ ^ ^ ^ , t* ttKHf/Tr 

^0 [0 0 13] «c*5, Sfc»ttW»Se*S«i, M^irn 
^ y U iZX o T ttKffijTr7W#S£T * 4r t »» ^ % 7"d^ v 

& ^^r^icit l xm* <= awssH*** x_ f> ^ * , « 

rn^5>A^pgf®^tLT/Si@:LTi3^, KT-MM B B 
fi-TA4 e -<504 ^ S?-IHWBBnotEfll^ 
ttlfrp^Ai: J: ■»T4#SE-CS4Tqrffitt3fii r j«< £ •) , 

WLTffl;Ki-&-i:t--tx&t, **vwi, HB-ftLT 

mm-mm t <omxr- ? mf^m^^-^m^ zm 
^^jifyor7^«i4t^ (H«j|[5) = 

[00 1 5] JMfcttdtt, $RfJ3i»B«Qyuy7^1R 

y<«B^i8«+ 4«lfih L, ^-^<^^(±, 
50 flE^Ru^Jt^ffiW-^KS-^T^ac^fflf-ra ^ * 
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jWSBSJi* K«¥«UE«Sftfc«*IMfr7n* r 

♦ AfciX* (R*A6) o 
[0 0 I 6] cwt*f-/<8Bli, E1£^&U, S<b 
t: v if ft Uffl ft Six EttLTii < «fc 

^*^*Waffl?nil:, BISPflM**#HtLT. tt 
Ltli, i-nf Ofitffl Ltv^j *r u - K 

/- , MSW* ^ - if * 4*£ -C S & «fS«« t £ ft * «fc 
*) t;-r*L(±\ -9-- tf *Sgft*JR»3 L/jJ.--»fJa^co 

[0 0 17] :^J; fc^jE7*-feX|»jL(i, ftPIflrc 
t> ft K- i: 4 o TOf S8B WilS 4 ra / 5 ii t 

\% -t *> mm t&mx* &± mi- k je* & %n % # tct 

ffi HftSt oT, -9- - / <«fiy/IES fc t O T-* & *• 
*]5e+&EJiE«iai«r3Eff+-& -t Ct4 it^Si Lv> 

[0018] «&^T(i, JijS L/j J: CVPQ1KH 

"C^fif £ a * r n ^ 5 A £ if - / <RB *b JR»-f ^li: 
c^r, Jfiffiifl ©yu^^At t: ?I fln • 3: SET $ 
& Cfcfr— 3*>4#Rfc LTv»4 0 £OJ: ■7fctt.ftri*<b 

ft^M/oM^a /5 A £ t , KTHIlMPSfiU^ftElB 
I t is < c twi:, ^-'<KB*<bJR»l-* x -5 i;« 
*LTtJ:^ 0 WWMSflorn $r?AJK 

w^s**, *^ w» »« u is « 1 4 w-isfeao ft *>*ke 

7 y 1+ %Uffi.-tZ>mtiSLt LT i J: v> 
■/ a ^ v A & Etfi-J" £ ft co B&Kffitt % Mfi£ L T £5 ( t I* 

[001 9 ] ffiwais^a^&WBrwwse^ 

UiS'**:^ lo^^ffiftli, IftacJ^Bfra ago 
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4*Jfci + &Cfcj&**AfcjlL* (8S*JH J 0) o wCOct 

[0 0 2 0] wOJ:T3G:ai»iaf3rrUB8i-&«l««r 
E«¥«UE1H-r*/i*tT-*< , -9— ^<«B*i, 
W^BB + ^flJftuai^i^ffl^offliaitff -i J: -J C LT 
t-fc^ (SS*5il 1) o *WBt(i, ^-fScft^t 

»i ^Li 0 IN A tfX&T^^fc^-- ^ ^r-T-ft-9-- fcT ^ 
XiS^ji^-fi J: 9 t: LTiJitif, 3pJffl«rtMfcfflofcft 
tz-9" - tf 7> x^7 * K? it /j(R u i&iS ^ W*3& f "J t: & & = 
[0 0 2 1 ] ttRBSrCiHi-^ttmffW 
-9— /<«tt*:ftff5ii-5 J: CL«^^ 

20 LTiJ^TtJ:u^- 

[0022] -fuy^um^mt, tixmz 

ii 2) o ^"/^B^^ttjas^w^D^^^ 

Wo»Ur'-"^3& t I|£W^i8«$<x4 ii*i»tLT, 
3) o MT'-^tJ± 1 ^!lx.li>bfr--> a >»B«r1»iL 

30 c.nu»j£i-stft*7^-^(iffl:4$-^Ti*sc<o 

[0 0 2 3 ] ±SEo«dtm:oT, WiJfffilp-CftAS 1 
i l/- ft «r o Jt-S-lp , * < l i T t: Rft $ i l 

h iil jB t CO S: T- ft W# L T tt IdT, KcioTIi 

[0 0 2 4] Ja±l±ttHEBPSgvZr^o«6Si: LTRW 
40 LT COJ: -) ^j&WMv X ^ A **flt+^S 

MWai«Bo«i«4: LTMti: 4: t»-Cii 
14) 0 -0&BW«»«(ZJ:if1:fflatf»*«i % ±jfi 
L a RE B?»v XT-All R S ^ K fi co ft fl] a if 

[0 0 2 5 ] ^60 J: -XrafcHEffiaiaSBiliJV^T t, jftRE 
fflfHTrWSZ^ft*', *ftS»Hffr a ^'7^ Ii J: o TfflfcRE®»Tr 

iTr T a ^ v A 1- JK W «t i - «/£ tict yjt # ^ ^ 
U^o 4/-, ^"^KB^Wi&WfltSrlBrflii: LT, ■/ 
50 a ^ -7 A JR»^R<±W.TO J: C«/^T # 4 0 
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[ 0 0 2 6 ] -t&Jb*,, miltt&&ttmt&ttm*& 

o T , - AKBdHES fc tf> "C* & *»5** & mfe-t h 

fli/o^nci^l UI7-IM«i 3£B C £ut & »fi5 
*0!3ao/jj6O»x6*a^n^9^fr, -9— fcJR 

» L t KT-MfflK fi^aHB 1- & mr& tn:tt*i^ 

t n Wife ? n &R ffiffia* h <o ft -f-ij maikizst^s 
I, tt£»K 7 n ^ 5 tf> tb JKigj ft tfcafE^K :/d 7v 

[0 0 2 7 ] set:, fl»ta*?Si:oviTfitf, Sfc 

* J: n K«JS LtU^ 0 T\ 

t Lt$St^:> tr-ii (Bf>#JHi 5) o 

'<B«U IZftmTkTftym*. ±JELfc&l»|fcl&r>XT 20 

a j - ij tt & -9- - j <mmcoi^m r imnk t mmx- $> z> tz 

[0 0 2 8] CcO^-z^ittCiJV^T Ett^SC 
tttii-iCLTUw,'^, Effl^Sfcii, tt?-W 

ffll S it tl T*fif £ U & *«£«:8l * * * (Dttf&V: 

[0 0 2 9] vnvaeB^ttffWtt^jiifi-*- 30 

tt^OBJnfcfT? Ji'jCLTU^o ft#, #«WT- 
(±, «^M»«IBU»Ii5fea<r*fT§-e, SttWlEtta 
Ciot VJHNfll«B4» <b i£fl $ i l & 'If ffi H £fom 

KnftT\ 4*aElWBr-/Dyvi,0«nHfc LTMt^ch 
<>t-#& (»8*jh 1 6) o 

[0 0 3 0] 

[«Wo?HifcoJB!Bl KILT, *«TO<r*^ffcL/j--SiMs 40 
« & Blifi £ PW L T JM]-*- £ ■ I?! 1 li , %tfcffl fiO&Rt» 
Br v^ri, OWEB&tBtft 1* ^i-KW BIT- * £ B *3lito0l <0 
*r -Mi, aiifl5UJSK$<L4 =i > h"^-? -> 

M#-9--><4 0 i: *1B;lTir»£. 
[0 0 3 1 ] (LWHl5JR$<Li=i > fcTjL-^ vXxX 

ra?-wwKfflj tLTOi>-y>Ecu 1 k h 

7>X;t>3/ECU12, rU-^rECU J 3, + 
\£ E C U 1 A , t-fWtECU! 5, TEL-ECU 
16, >-^ECU17, ASaiHijk ECU1 8, x 7 ^ 50 
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>ECU 1 9, atf F£MittliRBJ t ItfiOtiv^ 
t E'C U 3 d-eft&o' 5 

[0 0 3 2 ] ECU 3 0I±, r*Wrt* 

jaSitTiJ») , Mlff^sN f h r V-i> 2 3 it:i>y >E 
GUI It, h7>7;-r>3>ECUI2i:, r U- 
* E C U 1 3 k /jfTEK 2 it* ifftKX* ^7-^22± 
Utk'ECU 1 4 k , t-f ^"ECUl 5h, TEL 
-ECU 1 6 fc^EBSii. rKx-St^y 2 3 

IC^-^ECU] It, IfiailSjhECU 18k,i7 
^ > EC U 1 9 ti'EHSiiT^J&o 

[0 0 3 3 ] i/v/ECU ) lii, IfpHJC > > > ON 
^^•iHk LT^ff -J ^^>T'^^ C ftf*r^(*ti, 

>*9-, s«ifc-t>-9-, ^s-t>"9-ft t\ &ffi-t>*ym 

-^-tz^o'^ x -f >yx^ ?A?xuy h ;U - ^ ft k* H 
(to E C U 1 2 — 1 9 Co^r fcBl»U-tw« 
ffiO-««:RW+it, !>7>Xvr>3>ECU(t 

K11-&«IJB^^L, ru-^ECUti, ru-#ft!iJEO 
P^ug^^-r^c ifc, tefECUl 4 i±. KSESn 
fj^- M;»-tf<*rt«M8, ^-fVtECUl 5(iC 
D4r^cOW^«HE, TEL-ECU16I1, ^>K7'J 

^-^ECU l 7 (i > — ^ R*«M6, ^ill^jiL E C 
U l 8ii«i(XWWff*i*co«tt3fc^(:Kcf<K.feffl« 
i73>ECU l 9 (i ftxSMfm i: ft ^ J: ft JfiM 

[0 0 3 4] ^C0«t -j C#E CUl l - l 9 (i, -f-ii-P 

i l <o iwn i-tft tuwnw-c* z> , k u c t 

Lttfttio ECU I 7UJ:-&ftSfll« 

k LTcoMft x>>'>ECUl l^eri^v^ 

-V-VECU3 Ufc^LTiSWSftaJiv^a^-c* 
^ c COiEi*"eifp|"r*-5/ -V ECU 3 0J4, i^^O^ 
foty h h^x-fECUi LT<0«|g*:«iTv»a o 
i^:, &ECU 1 1-1 9li> ^n^iLC0$iJ|fll^^60iUiJ 

bp ( - ij u » t & siste co $m % tit as -r z ft km tb y n ^* ^ a 

Ip:pJ-7*-> ir ECU 3 0^aS«$U^i o -t LT#(Z, 
***WT-«i , I|» B7 * — *>* -v E C U 3 0 t'j^ 0^ x. (XW 

IB/"P ? i €: JJt jag v *«>>ECU3 0 ^ 

[ 0 0 3 5 ] «l*-9--^<4 0(4, ItH^ffilzKH 

5 0 i ft L T , fllpj"' ^-ytECU30i:f'-^ jffifi 

>t"i-r>xfA>LTiW^LTt^ e fix, 
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[0 0 3 6 ] :of'-^-X4 l izji, g| 2 U/TrTJ: 
(i, ^IMI Oj^gf^i v x t ^ C J: i t - kfxiz?g 

v^4 1 c, f LT, KilrrDy-^^ 1 cizj:£ 
»aU*»U»-^v»TIpPl-r*-^ir E C U 3 0 ^<bj8« 
Sn&«BfiMB4 l d/«?n;, e :wl:^ ¥A$t?& 
W-rw^^A 1 cl±, >F**fflf«4 1 b(Z*tt&i?-£T 
ffl;S^LTv^;, 0 H2 4»-e<i, **£HfMB4 l b tmt 
^iryo^7A4 1 c fcfc-fe* H:LT7?Lfco 
10 0 3 7 ] Mfi£1??$!i4 3 a tZ(±, '<4 OCT 

Biz W + i &BJBB1ff«L fl£«* '/ u - K«r jpi-fllWiB 
Si, At CK&lcRt HtF tz -fe 1 1 SS-I^ ^t- T ^ ^ t 

10 0 3 8] 3F**tif«4 1 bli, I|lffl<0>F*£ffitt* 
8lSKfcLrt:fc©-C*»K ipM^*- v # -r EC U 3 O^fc 
&fl S <t * W v *> -fr t S* * >p * *b , 

£ D ^d£f#rrrn^vx,4 1 c li, W^*-v-rEC 
U3 Otfr^yu - K LT-^RtS & <OXfa *? , ECU 

9fio«t | bfflESi"& fc cotzwiBjeLait^Eff 
[0 0 3 9 ] t-Lt, ttft1ffW4 1 d tf, lW«-?*--> # 

tEcu 3 o izxt&mmmtfWfc zntzm&r^m s n 

lft*!$«"/n*-->A4 1 cOflsflEtzW* 
X'<hZ>tzft, Bl«r+-'<4 0f;f-M-X4 1 tZEffi 

[0 0 4 0 ] ::ftiWi:, ipWv e CU 3 

OOftfEfcttTOU ^niZ»i£.+ &gn*-*-'<4 oaW 
*ECU 1 1-1 9<BftLafc**zRlfli-* e H3li, HI 
* - > -v E C U 3 OCT j{tr S i l Z> j&B»K4S£g £ 

[0 0 4 1 ] i r«*D9^7- (WT, Xf7^J|i 
JZ8e*ST7Si" 0 ) 1 0 0 *Z#V>T, J|tWrt*7 h r 7- 
* 2 1 , 2 2, 2 3 i^EC U 1 1-19 (07-9* 
K«1" & o w Z. -f- * (i, &ECU1 I - I 9 -e 

Slfif S ft * &B#ttiJ yo^7ACJ:i ifcB«ttJttfli7'- 
9 , RV\ ECU 1 1-1 9 IW^fllp^ ECU 
30frfrLT*l)JR») 3 ft* 7*- * -C-*& e -ffcibt, 
Itlp-r ECU3()!i, ZU^Of-^ tfiftt 

4:ti:J:oT, ECU 1 1-1 9 tZiJit&»Jc9^& 

S-jWCfc < , e c u l i — i9 oajJMBifttzaa^* 
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t1&Ui-t£o 0Ix.tf, t kf E C U 3 4 ri*f>tfJb»)« 

t-*&z: fc «rs?i"f- ^* f ai**nrv^izt3&»^*» 
r, i>*/>i«:cu i iof-^^i>v'>»w f 4 

[ 0 0 4 2 ] Z<D7- ^JE««fJlilZtt-^S, S<S 1 3 
OTIi, ¥We0>Fft£«:fl|»fi-£ o ZZT'T^^y/fli 
SftrtiSKS- (SI 10 :YES) , S12 O^Wtrl" 
4e 5pft*3& f flBrSiL<?v»J»^ (SI 1 0 : N 

10 0) , aL»«o«La!«r*fir-ti-r, *&BI^»laa«r»Ti- 

[0 0 4 3 ] S 1 2 0 4 0 fccoffilZf' 

- * fflHI nT D6«affi «r ffiii £ L , HO ^ fr £ 3*{f 1" 

e c u 3 o mm*f - ' < 4 o *■ »ff l t« x. - +r 1 

D^«X7-Kt*afflL, «*^- '<4 0 7&*±jfiL/j 

%kx%2ixz>o zcox iizLx7-*mmwmitm*m 

[0 0 4 4 ] wiUZ#LTJmar-*-/<4 OTMi. |UJv^ 
^i*rfl|«L(z4'tiL^^A*1»«ltf'-^^-X4 1 *w 
T=A^t»^i4 1 bt«:ttKL, ^Otz, in?iffS4 1 a 
* ^ ftfeRIBfitif W& t/ *Wffi« «r *-fflt L T % M^i -T * 

[ 0 0 4 5 ] Lf^T, R< S 1 3 Otli, tftS^BTr 

r o y ? u c a tz 3&»s*» * *u wf a e z o w sir 
30 (i, «st-/<4 o^<»«ajR*Toa»i*za-^v»TiT 

^ii^> 5 :: T-#i2tp» r a ^ v ^ ? n tz t mm 
sn/:tt^ is i 3 o : yes) , si4 o^s.fT-r 

-6= -^J, #>3t!pfr7a'/v A 4 1 c«?n4'^ ; i 
tii (S l 3 0 : NO) s z-o-fllir^afrtt^ili-o 
[0 0 4 6 ] S 1 4 0-Cti, EK^aESrft-Vci iOEE 

(i, Ecurt^^-^fry-^T-«s»iL-6»'firuae* 

Steffi f (r) tiS«L, te*0«Bt7& f , zwr^M f 

(r) (Z3S-^<»|»«F (f (r) ) «rjg«i-i J: ')C 
i"&c fLT, -*fiOKH*i, BUaittF (f (r) ) = 

OiSH t «c «« i: fl»f i" 2> t ^ n &&X*> h = 

[ 0 0 4 7 ] Z(OX ') &Ett^« (S 1 4 0) CJ: W 
S-^-^'4 O^iEST-A&tflJKeiL/iJft-fr (S 1 5 
0 : YES) , S 1 6 0^fMf+4c -^s ES-efev* 
tfll»r$tLfc»* (S l 5 0 : NO) % Jaffo«j.3i^9l 
50 ff-^i*, *&B»K«ka«:»Ti-^o 
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[0 0 4 8] S 1 6 0T'(±, 4 1 c 

(Oy*)su- K*fr? B CCTM±JK'«-»i--'<4 OC^L 

&<&2£3£8lr7 , °*"^4 1 c fc5rffi1-& c S<S1 7 0 
-Cli, ^^VD-KL/.'ftfM^o/vA/i l c £^ 
ffi"&c :ui:j:ot ( ecu i i - i 9 o^coi&^-f 

K , Jgff SUA ««c So'^t &*BBTrO«FS «r fif ? o 
[ 0 0 4 9) L/://ot^S 1 8 UTIi, fcRBfirW 

*Lfc»* (S180: YES) , S19 0^*fr*-*e 

Mfc»lBBr*'»SSn3&t»»^ (S 1 8 o : N 
O) , S 1 2 0^f>^«.|l«r«i5 iS-To 04 rj, w^r- 

Cti:ft» (S120) 4 SU^ttafelfrBr^nr^A^a 

(S 1 6 0, S 1 7 0) c 
[0 0 5 0] S 1 9 0T*(i, 1*5eL/j&»flnrrCBBi--6 
tt»fll«<riH»-9— '<4 0^a«i-&& h ti:, &K<: 

tio tt»UBI1-&«««S«i, WxldT*'-* ECU l 

ii*nLhi\Z>o ttzmUM-tVECU I 4 ^Offlfliffia 

i: v- > J: *) fc}*fctt«crtSR^T-*-3T & ivs i*i<b 
[0 0 5 l ] Z<D£ ? EC U 3 0 UiJ 

^IT-*i 3 dcQM-aii, ±i£LfcJ: v &Wffi*JKlfr« 

t * - > + cu 3 o t o inj t- -f - 9 mm nrag« 

BB/j'* a 3 *l * *: , H>r £11* RO IQJ T-« 0 £ L 3£1t 3 U 
[0052] S r»8J*3S 2 0 0 dJJUT, ijlftfij-'^- 

Wrf* c :«*aii. B3*os i 2 ocw«t^ t 
200 : yes) , S2 1 o^»fT-r&e ra^*- 

^««^ailSii&v»»* (S 2 0 0 :NO) , S2 

5 o^»ff-r-5e 

[ 0 0 5 3 ] S 2 1 0Ti±, f-^-X4 1 ^coffcfc 
!£©f-/o ^7^4 1 c fr, *#L£H18ffi4 1 b **-lZ L 

4 1 a+ott»iiH«iiiacr*wfli«t#aii-& 0 -e-L 



14 



' ^MMr7 , D^7A4 l c^iH«5£TfflJnKJ: »K Jp 
P'ij 7^-vtECU 3 0I*E!I£*»*3S!tT* (0 3 
fiOS 1 4 0) = 

[ 0 0 5 4 ] L/:^t t :ni:WLtS 2 2 0t 
(±, fliflj-r *- y-r E C u 3 0 t oBl-cBK^tttgsif 
1" i c K*E¥ «*>*fr CJ:^, $Ht * - v -v E C U 3 
(Mi. 4 0rt f iESTA& fcofllBrfrff-) t 

(BI3+WS150:YES), ^lrrn^ 7 A4 
10 1 c >o- K*S?*LT < h (Si 60) = 

[0 0 5 5 ] t:t?a< S 2 3 OT-li, «SEWIr-/D ^ 
7^4 1 cco^ rr >>D- KJ^rt f *ofc3M5ri»*fl»r*- 

(S 2 3 0': YES) , S 2 4 0 CTl^i^P 
4 1 c SriSWL, S 2 5 0^»!t+&o- 

* % >p- KK****^ tWtL/:«* (S2 3 

0 ! NO) , S 2 4 0O«l«**1t-£1*. S 2 5 0 ^# 

[ 0 0 5 6 ] S25urii, ak»«** f afflt$iL^^5 
20 *»«:Wirr1-a 0 El 3* cos I 9 OC^Et 

a (, , W7 »ECU3 0(i, ^(^©"P/f 

* f 4#3c$<L4 t (13 ^coS 180 : YES) , -rr<D& 

«* f jS«$iL/;*:Wllf L^»* (S 2 5 0 : YES) , 

s 2 6 Q^m-7-tz>c --ft, iki*flHK* f iai«*n5fcv»» 

* (S 2 5 0 :NO) , W»0«La»«r*fT*r, ^-9-- 

[0057] ai»flH»)ft r ifi«sn^»*uiMT-r* s 2 
eom 4kKtB««:7'-^^-x4 1 uK*-r*e c 
30 ny/, 02 **:^i-»Bfl!*4 3 dcflatio fit 

S 1 7 0«CTttl»«IBCl»-^<att«:fT^, *<0 
(i. Wl^tB^4 1 a^^MMi-C^^L^M5t 

i>cr>X'&z> t\<*')&?rX'$>z> z 

[ 0 0 5 8 ] i/j, ffuifij-r v -V E C U 3 0 CiJIt* 
4U &K»Br«!.JB|it:.»l£. LT^t S iLi E C I) 1 1 - 1 9 IZ 
ii(t4W, B5W7D-ft- h(-^i"ECU^?li 
T-^^o ^O^iPMti, ^E C U 1 1-1 9 Cii^T, Br 
5g B# H fe3 Pi T«»)aLKlT?iL-&o 

[ 0 0 5 9 ] «ta9& r BMtt$na kif, >*Io*?io«S5 
3& f *-»^^S^«:«ir-r& (S 3 0 0) c wC^TFfi, 
W^^-ytECU 3 0HJ:&«talE»Brror9-A l 4 

1 c w*1f J:o-Cffi»S<i-& (H3 +OS 1 7 0) o 

50 JB*7& f *ofc»* (S 3 0 0 : YES) , WJ&teS-TD 
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Vy<U*m=rL (S3 1 0) , ^EC U*fl.?U£ 

^T'r^o »I&JME©16Srt f fc^»* (S 3 0 

0 : NO) , S 3 1 Otf)&L3l£H*-7-£-f , $EC U^ll 

SiL^n«Jga«e^ot#»* f *:W-7*--> # -v ECU30 

5e t : * j ffl ftmo mmmm -c *> < ujt x ^ c 

[ 0 0 6 0 ] *(l*||lt«0»»»Bf->Xf'A36*««-i- 
-2) t i o *3ltli«l co&[SSP£®r x f ^ T- J4 , 
fliffir? *->tECU30 , flIWrt * ? h 7 - ? 2 

1 , 2 2, 2 3 ±fiD*ECU 11-1 V (D7- 2 

ix {ms*p<DS i oo) , (s i i 

0) sOiD, *ECU1 1-1 

^-7 ^ J: Xlf, ECU 
11-1 9 |iJJT*$P^^ ^-vf ECU 3 OfcfrLT**) 

tztf^Ts !Pj7^->'t E C U 3 0 11, ECU! 1 - 
1 9Hi5tt^«JcOT^^^ttT'^< , ECU 1 1-1 

*^*:»l£Lfctta!E»Hf'/D r^i* 4 3 cfrJRWL (S 
16 0), M s ^lr r a ^ 7 Hft f ; > c j; ^ 

r, ec u i i - i 9o+oflriii-* 4^>n»fi5«ia* 
sfi $ * , vtx. tmmm kjs it & rt musk & <h*£ 

$-^^^>:i-J:oTi!ft|©©iTr^i|$7E-r^ (SI 7 0), 

[ 0 0 6 3 ] ^ll»i]O^F^ir>Xx^T-(i, 
ak»BBr3& f fl*£T-Sjfcv^»* (SI 80 :NO) , »7: 
fcra^*to-£«»*««L (S 1 2 0) , «l«#i3£»Wr 
-fuvvu 4 1 c frttWLTSHT-*-* (S 1 6 0, SI 
7 0) o MtiWfrcit LT«-* 

H/j f #x<b*L*fca&, ttftOflfcSEWS 70^9^4 1 c 

MltiTFTA (Fault Tree Analysis ) #ttSrffl 
v^T, ^^$^^0/7^4 1 *«MBLT*J<w 

tW^Uo -ntaox, &ecim i-i 9 ni 

[0 0 6 2 ] Sfctlifc, *SSft«oatl»»»rvXf' A 
T-(4, lpiWiSl-»^*-'<4 O^F^IL, -ooiji^+j- 
- / < 4 0 ^ * tf M v IS iSflli- h 

Z£lZX*l (S3 *C0S 1 2 0) , HSiJ— '<4 0 frh 
tit&&#-f*ry2*4 1 c ZW&-tZ> (S 1 6 0) o * 
IB* oJtfBooKIBMlfrMttT & & c fc 14 t> % 

[0 0 6 3 ] * fc, JBR5+- '<4 0 K(4, ffl^lfl-^4 1 



(9) 4¥M2 0 0 3 - 1 9 9 3 1 
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E C U 3 0 ^Mt^Milf 7*0 4 1 cfciMR 

-th (H4 4>«QS2 1 0) o L/:j& t oT, ilttl&4ft$& 

■frn^9AfeaKTS4nrti»tt* f *< aa&tt 

[0 0 6 4 ] 2hlZ s W&mn4 1 a KliftttifflALT 

v » a jl - Hf t flpgi- ^ /- £o4$£ffi« b&EB $ n r ij 

0, w«0«FS1M**fflv»T, Sifl-**-->'* ECU 3 0 
10 t^BBT-^-^af8¥ffitta8«:fli3C-r-Z» s *(Otzti>, 9L 
ft <: iR ^ ^ to L ^ -3- - *m n <0 3F iE £ T * -b X t Rfi ih + 
i C t^-C& ^> c ~~JjX\ » E C U 3 0 

li, ^2nf#rr^D^-7^ 4 l c co*^ >o- KCjfeSo 

l 4 0, IH 4 4«<7) S 2 2 0) , 8K5^-'<4 OOiEStk 
Srfl»fTl'* (BI3+<0S l 5 0) c -fUZ^T, 
"'^-yf E C U 3 0/j r ^iS^^rn /5A*'Jfflt-& 
w t S: RftjfC & , K-^stffc ffi* Cr a:» t #i" «fc 

20 [0065] i/j, *mtm(om$&w*s*T^xi$^ 

l«7*-s; -v EC u 3 0(iafeWBW**fSEi-« (El 
3 >^c0S l 8 0 : Y E S) , ttREBj9r(26Bi-^ttlQ1fffR 
0^5^11"^ (S 1 9 0) c ^tLCW 

Lxwis-9--vM o(i, »BW«yj*a«$n-&i: (B4 

fco S 2 5 0 : Y E S ) , tttttfrHifr -f- 1 
^H£1tL (S 2 6 0 ) v &r»1fffi4 1 d h LT*»LT 

(H2#JS) o L/:/j j oT, CfiO"a5c»fll«4 1 
ffl^iltHJ:^ #i^rr*/n^'viU 4 1 c tftflc^ 

30 v^4 1 c <0<1;fltjaiq5^l6]±* f B'9iLi o 

[ 0 0 6 6 ] ^jn^T, /<4 0(4, ttffWIRcOte 

S 2 7 0 ) o fflAtf'Jct&tf'&^Z:'*- V \£X 

#3& f *3ffl o /j * (1 -9" - tf X X^g S: I* tL tz m U iaa <t 

[0 0 6 7 ] fil±, **W»4COJ: «r||tfe«lCftr«lft 

40 (>f) ±mmi9\)xu, JpMmxmiZtiZ-fvt'vA 

[0 0 6 8 ] Z<OX 7 &«.ft^c?«4,- BI6 HS^i-J: *; 

(C, ECU 1 1-1 9taT^x^««7 , o/ 7 i. 
SKS-9--^<4 1 UfflKLTiJ 

#t3l£^ir , rD^vA4 1 ci:^(: t fllffiT 

ECU30t:<toT^^>n-K$ II^, J:-)i:LTt J: 
fir, WMirn^-^cov^i^ iffjas-?* 

50 -vtECU 3 Oi^ECUl 1-1 9 0*08St-& 
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iOKaHS Sii* X -) ctio oto, ECU1 1-1 
Ti5it(^-tv>C0T-^)^ o 4$UH6 CStJ: ') ^3t^" 
1 e*rffl«LT£lt(tf, &&t£ISr 7"o v A 4 1 ci:& 

[0069] (d) it z% ±mmi9\ix'i±, T^&zm 

1 (z fiitK * it * ttRKIff «K 4 1 dtttfrt 
i i IX. «±«JS a>K ^ * * ^^'4*36 $ n 4 iT jfttt fe * 

WJEi"&ljHEI>Bf , 7 F a^9i.4 1 c *^«6JBUf-fr-</<4 ■ 
0 0* O ]pW-7 * - > t E C 11 3 0 ^)l±it~tZ> X ') tcffirk 
tttfflLTtIv*. f^>P-KIt flHBaxhfcPPx. 
& tt'ECU 1 ^IflMciflv 

ib n £ ilk 111 x- * *«r*f - * * ^'ws-* — y <4 0/j> 

1 c &^#IDtf#LTiJ<tli\ fti^U J: oTI«"l 
*0«£R#Uttff8MBf:/o A 4 1 c fciPffitljBJKiT- 

[ 0 0 7 0] (ys) ±ESHfc«-eii, &K 

ffiW^WSecMifc^-y t(i (H3 I^OS 1 8 0 : N 
0) , ^*3^L»»Jco^^KfyD^^x k 4 1 c 
o- KLTv^ (S 1 6 0) o fc/i L, ttK^4ft«»K 

^ n * , m i im^com^mwf -r n v 
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"e«Ofl|«t«ISF-9--/<4 O^MLT, JttBffi3#0« 
Bfrfcffii CJ: 5 4t»«i:LTt J: ^ 0 

[B 1 ] ^iWwaHWMfrS'*^ 

[EI 3] &l»»*r«L3at-Si-7D— ?-ir- hn*o 

[HI 5] ECl]ftfflt3;t7D-fi-K*4 0 
[ HI 6 ] gijf£ MM tz & it & JBIS^ -^'Of-M-X^ 
Iff « 1- /7< 1" I H, 9J Kl T- A & 6 

1 } --jc> > > £ c U 

•ru-^E c u 

•■*-bfI£CU 

tECU 
•TE L-ECU 

ECU 
■MIIWiLECU 
.jc7 n > E C U 

2 1 — fiHUX** h 7-? 

2 2 k;-^ 
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1 •••-r'- ^^-7x 
1 a-«IS*« 
1 b-3p*frfl|* 

1 d---ttftflHK 
1 e-Wlc«rD^7i, 
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